Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct BMA-18: Data Classification and Security

Data Classification and Security. Information must be classified and protected commensurate with its sensitivity, and data classified as non-public must be protected by an appropriate level of security (paras 48, 52, 54).

Other controls in BMA Code Section VI: Detect and Protect Controls

BMA-10 Threat Intelligence and Vulnerability Alerting
BMA-11 Information Technology Incident Management
BMA-14 IT Security Incident Management and Response Team
BMA-15 Notification of Cyber Reporting Events to the Authority
BMA-16 Access Management and Segregation of Duties
BMA-17 Staff Cyber Risk Awareness Training
BMA-19 Data Protection, Governance and Loss Prevention
BMA-20 Malicious Code Controls

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Bermuda Monetary Authority (BMA) Cyber Risk Management Code of Conduct controls